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(57) Abstract: 

PROBLEM TO BE SOLVED: To surely prevent illegal 
copying by ciphering reproduction data which is supplied 
to a decoder through the use of an undecipherable cipher 
key. 

SOLUTION: When identification data transmitted from an 
MPEG decoder board and a public key corresponding to 
its ID are judged to be effective, a disk drive 
calculates Challenge (C) from an expression C=ak1mod 
p and supplies it to the MPEG decoder board. In the 
expression, a and p are the public keys, p is prime 
number, and k1 is a properly selected random value. The 
MPEG decoder board selects the random value k2, 
calculates digital signature r and d and supplies them 
to the disk drive. The disk drive calculates p r . y d , 
calculates a c mod (p), judges whether or not the both 
values are equal and calculates Session key (S) in the 
care of being equal. In the meantime, the decoder board 
calculates Session key (S'). S becomes the value equal 
to S' and it means the same cipher key is obtained. 
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(57) [Rft] 

^ K5-f y^f*, DVD-ROM^|SH$ttTV^^r — 
Hf§^3r/B^T, Challenge (C) $r?ltg U M 
— KH\ Challenge (C) SrfflV^ , *f*J9 

ffl^T, B»#>ft:«SriKiP-rSo MPEGfW 
Ttf— TO, C h a 1 1 e n g e (C) SrfflV^T, Rff-fHL 





(2) 



i!ulEj3?;£<£>B£-5HbSls ^ffl^r^fb^HfeBt-sHb^— 

H l co^B t mftsaS 2 <Dmm<v p *><£>ffcW> b oi&S'Jf* 
C= akl mod p 

BtfiEfifcfrflS, mffS<^Baiia, pi:, 7 v^-MBk 2 SrJB 
1^12©^-;? r S:«i|CU-C, HulE— 20 

stria— flffiEdfc*'*>e>w*&$H5WiBas2 

©f-^ r irBufS^^^ffik 1 £ffl^TiiufEB£^Hb§i 
[ftfjfc>g2] tufEjgl oSHtStffE^2»^Btw^ 

r, B(f|E^ffl«tp, BtffS7 Affi k 2*SJ:TJ<8H!&»ii 
Srffl^r, IB3©7*— ^dSrattlLLT, HiriS— 30 

U 

iiuflE— WiEft!l^^WI&$H'5HfffES2 7 s '— ^ r 

*«P*<b-*-SrifcJ:9»b*tfc, l£<Hfr^— 40 

fEWP^t^H/iiBf-^-'fkfiix, y &iiuf23Sl ©=!£B/5><bg: 
ftU 

tiHHb«Q«rdfcJ*U 
U 

*trsa«*fl:Sixfc»t*^b«ix, y»4, iiMa«HNb*Q«: 

miE^raflia, /3, p Srffli^Tltf-SHb-rSi 50 



• 4$H5pi 0 — 6 5 6 6 2 
2 

HUlEBf^fb^ttfcBgr-JHbglx, ytt, Sttttn&OegtM 

ixfcv=— * -ea>5 ~ t t -raw** 1 ^aE«t©^ 

[W*«5] Bf^Bt-^-fbSis^fflv^r^— ^SrBt-§- 
r. t let *> # ej^fcBf ^W^r-Z £rfg l <7>=£fia> 

ffl v ^ r «-§-r a 7='- ^ «-§-^B *3 ^ t , 

HufEBf 5£OBf ^-fblt S Srffl V ^TBt-§-fb $ nfcBf^bT 1 '— 
«rffiBfje«)«P#flslisSrffiv^r, lltriEft-JWbf*— *«r« 

i »3Sfi^HfrlE«^B<^ 5 *><z>ftfc*'*>^«Da^ij-r— 
^ffLt^ a&IEMW'J?*— ^tw»Jt£^-5^Hi«o, p* 

7 V^-Mttk 1 tflfffE^Sia, p*»?>, 
C = a kl mod p 

BWBtt*-**, ffiti-'AMmcc, pt, ?y^Ik2*ffl 
V^T^2(D7 ^ — ^ r SrSISLr, iME-^t-WSirS i 
ttlc:, WEJBirof— *c£ifflfe5i'^*k2&ffl 

huIB— ^iis, HfriSfth.^^#t^^H€>HufS^2 
<r>*f—9 r irBfiia^^^'Afittk 1 Srfflv^-Cmfl2Bt^-fb«i 

mlfEliil^-^, buIH^ 1 <DT~— mifSB 2 k>t='— ^ 
r, BtrlE^^itp, Mm^^fM&k 2i3j:t^§t5*«n 

WfE— ^-^^ WIB<ih,*^?>WI&^^-5mrBE^2C07=— * 
jf^HSffii:, S«lE^BB«a, p tmrfB® l <o^— ? c 

[|f*3S7] mifE^— ^ttBf^b«iQ^ffl^TBt^b 

j;9#e>ttfc, ##<b9*— ^atmiaBt^bSixfcflf* 

fbSix, ySrBfrfH^KOKH^feSm-fSSff^ei:. 



3 • 

W#* 5 teE*<Z>^-*«^«B«, 

p 

C = a kl mod p 

V^TSS 2 r, dSrSULT, WfflB— 

iifFEE«j&fmK«7*— *Sr&>^"e*3?K lMrEE»7*— 
l l ] ME^r-^-^/W-te, iiuEIg l <^££ 



(3) «fBH¥ 10-65662 

TV^r i^^mir-r^ff*:*i o ^Efc^EftWEfto 
l 2 ] iWSEt*— * teRf-^HbiiQ Pt-^ft 

a, j3, p ^fflV^TRt^-^t:bfeBt^fb^x, y ^\ &b 

{cmmm^-^^Mft^x^^tix^^ r. t 

10 *HbLt\ ffffftf-^^lilMSSlOlt^, HuE 

mmr^9 1 we*— ^srEft-r £ ^ ^ £ 

20 £ ^rftii i"5E»:#ifeo 

4] r—p&mfccDm^kms&m^^xm 
m\<^xm^&^-?fe^mmb^£ymf&isn%H4i 

30 ^^MtS^gi, 

m l oKa^fe^WEffiP-^ft^— ^ Sr«fE«F^b«S 
ffifEEftfflEflcttEftT*— ^ £*a-A,-C£5 9 , BtfEEft^— 

40 mmm 1 o^B*^timfE7 : --^m^»e^B'j'i-6 1 

huEt"-^ ^HuE^r— t 1 — ^SrEfiEt-S^T-y^t^ 

[BI*3Sl 6] ^-^SrBf^ut-^bliSSrfflv^Tie 
^btt, rtp#fb7^— ^artbJ^-TS^l ^KBt, SuE 
»l 036B^^^ffiEB»^fc^^*B&Elit-g-{t:«SSr 

50 t^T, 



UMBfti fettle?*— *«*3£«&*B'Jt-3 ir 

m 7L s £ t * # at t -r s E»*«feo 

ft i <©3£iia»e><©fltfaartf^b9 !r «-^ SrHtrfEBf-si-fb^s 

^fi id <£ o T Sdfc $W fESij&ftW fc ft <Z>fE^fi \c *5 

meft i <o»«*fctti)trEf*— ^«#««sr«iBiJi-6 1 

7 s — & «rnff-sHt;«Q x^4-it Lt« ng-sHbliQ -m ^Hb 

* tbfc^r- * * 5 ^ ^ y 7° i: , 

£ It «HufSv='- * (HHSBSrWHiJ-f 5 ftS'J^'- 9 J-StJfc 

7*-* SrflHHfcdfcQ T-Bt^-fb LT. Bf-5HbltQ T*Bf ^Hb 
btiZ-tefflma, p £, Bufeftl W^BSfcttSftfE^— 

* « #3fi ■ *»B'Ji- 5 £ t ffl v ^ h ti 5 mm & t & m ^ 

X^it LXmbintc9%^tmx , y SntufEft 1 <P3SB 




^H^Pl 0-6 5 6 6 2 



HtfEBlf^-fkliQ -CBf-SHb $ Hfc-r- * £ SulE^-— ^— rf 
io g(i^3l/^■r, 

f>n5^RSIta, p£, SfrlEfti«>3£B*fcf4fltilS^— 
TBt-^-ib LT# ^n^if x , y SrituiElB 1 <Z>gfi 

HfriEBt^-fb«iQ xm^-it $ ixfc7= — ^ t atim* — x — 

[f**«2 1 ] ?*— *Sr9f£©l*-«HfcttS Srfflv^TBf 
^-fbLT, B^^b^-^SrUJ^-rs^l W^Bi:. SfTSB 

?:MIEft l ©SB^fcttflWa^-^a^SBSrMWJ-rs 

?%±l$-tZ>X7 L -yyb, 
■fb, 

5rt Sr«M* ir -T St* ^ ^ ^it^feo 
[st*:«2 2] ^Srm^WBt-^fbiiSSrfflv^TBt 
^•fbLT, rtf*ft7*— ^SrW/J-f Sftl©*jl£, BWE 

m^^xm^&^-?m%-mmbiz.£'9mi$,£tiz>w£. 

mifEft 1 o»fi*fctt«rlB7*—^«#*««rilB>J'*-* t 

J;>9, ^f— 7^— rff^f— 9 7*7- -y b, 

m^'—^bmm^—T—y'^m.m^^-r^^'ry 

■fb. 

« r. £ Sr#^ b -f S f-f ^ ^ »J6*ifeo 
[ft** 2 3 ] Bf -^BQ •CBt-^-'fb ^ixfcy*— 

50 (om^tms^m^^xm^t\,x, nt-sHt^— ^^mtj 




%> f?£3£B (- <fc o T S£ $ ti 5 ^ ^ Zttmrt 6 ft tf> 
$ nfc x — 9 * 4ztil1r Z> * -r <y :/ i: , 

* fc lamias- * mwmm srswu-t- s •s»j7 f - * t-aws 

[0 0 0 1] 20 
BBtfrjSfe, Eftatfr, ^-Y^^MSft*^ IE 

fc* J: t*SB^ «BE£8u IBffiK 

[0 0 0 2] 

ftiE. ^Jtfr*?* 1 ?**? (sir. 

DVD £15*^*5) (D-?*—* *v h&m— ftSfroofc 30 

DM*5V^Tf*, J; ^S^raco^^^-^SrlBSi-Sr 

ft MPEG (Moving Picture Expert Grou 

p) iSTst, J£AT\ MPEGfcfBttU MPEG^SSrffl^T 

[0 0 0 3] £^6T% DVDdr^Tte, t^^ — 
fc, ^iEi^KigS^MPEG^^-^^fflUT, ^ 




[0 0 0 4] rt£>J; ^ :&7FiE=» SrBSihLfc9 ^ ^FIE 
i-^^HfcMPEGf=^-^^#l^-t-6/c^(^, t=V 

S:t-*3^"t\ jES^MPEGf^-^fc§^^ 

seu fcm<oMPEG^^—yx*fc%kmm£ftt^ 

[0 0 0 5] Uc^ot, -co J: 5*»*SrKSr fci^i 

t=V^^ K7^7>^S4f-^«PEGf^ 
-^ISJtif, ^jEatf— SrBSit-C*. ^^o^FIE^ 

fiCTOMPEGf^-^iotf^^^ K 

y^MPEGr^' — y h(Ofn\ X(D^r — $ ^ ffilS ^ 

[0 0 0 6] 

^tl^^nTv^-5*aw^^t:ll^fflv^TMPEGr^ 

[0 0 0 7] **M«^<7>J; 5*«»t-«*"C***bfc 

[0 0 0 8] ^/i, *^P^(^ft!lc7)g«Jti, fV^^ F7 
[0 0 0 9] 

«#*«fett, 3f«oi**fkiisSrffli^riiff#fbSttfciiff 
js-t-5^wn*a, p&iJiu ^^^^^Bk 1 t^mm 

a, p^^fe. C=akl mod p Cffiot^ 1 (7)^—^ C 
^5, ^Bl«a, P 7V^Af|k2§rfflV^2cOf 



[ooio] %tt#m.5fc%eM<D? r —?&f§rmw\-£. mfe 
v^-c, ^it^-pzm^-tzmivi&^wtbzm 

*te*»&-*-54fcHI«a, ptriltRU yV^Aftk 1 t 
<kB@&a, p^, C = akl mod pJ^oT, |R 1 <£> 

JfjvvC»2©?*-* r ^SfLT, — i b 
i>i^ fgl <DT'~?C t5^tk 2 trffl^TBf^t: 
*S 3 6>l£, 

£*T,5Jil2<£>7=-* r i7^«k 1 Sr^TBg-SHt: 
«SSr**i-*^ai:*fll*.5ii:&W«i:i-S. . 

[ooii] mxm 9 {^iE«<oK.SE^^tt, i <o'&m. 

k 1 i<k|M508a, p^P>, C = akl mod p i£!£oT, 

i»«k 2^fflV>T^2C07 :f -^ r , d^ifU,.^ 
JiWif&l-Sxirs'^i, — $*L5iS 
2 <D-r—9 r , d ij^ro^BHttfl i&ffl^TiS£<**b 
*«i, ^BBgia, piSiof-^c^v^SIS 

[0012] l 0 i£ffitt<Z>Cft£K#tt. flBAtttt 

ri(rj;!9, *-x-:7Vu£^1-5*-r s/^i, 7— 

[0013] W#Jg 1 3 lufBttroBflfcfrifcW:, «F*fk«i 
* fcttx-* «#®fi*W8«J-t-5 WW?*— * J-WlS 
i, * ktf—T—zfA'&IB&r&aTyT'b&VI*. 

[0014] i 4 {ci2«wfa^®B(4, Bt-sHbil 



(6) WfflW- 1 0-6 5 6 6 2 

10 

i, y^—^b^—T—y/^t&m-r^m^b^m^. 
z>^b%wmb-rz a 

[0015] 5 \ztsm<omtmmt. n»mt^ 

^MtS^ryT"^, 7='-^ i*— x— -f/v^W^r 
ft-CV^i r i «:«f*i:i-So 
10 [0016] ffjfcJS 1 6 dlESSofE^fttt, IB l 
K*fcJ4f*— ^'*»36«Sr•B'J■t-4^:#fflv^e>i^5^tHl 

%mm-tz>*'ryy°b&mz-z>z.b*wmb-tz>o 

[0017] f**« 1 7 ^fEttOfE^Sfite, 3? 1 ©g 

7l<7~?*$L$L-rZ>$L&.^Wi.b^ f-^t^-f-^ 

20 [0018] Sf l 8 K!E«OIE«ig£{*:tt, IE«ig£{£ 
SSIE^— * 3rgX-C*5 ?> , IB^x — ^tt, t 5 '— :?£rB£ 

SltSirtffl^feh.S^ifia, Pi, 
iS:fflVTIiF-^fkUT#?>ixfeSt#-'fl:«x, y 1 W 

[0 0 19] f&jfcJgl 9 ('IH^OfE^ffitt, -T— 
^S5#r5i#/Bv^ns<&HBtta, pi, ^iro»B 

40 gts^fy/t^Itsrt^tts. 

[0 0 2 0] f&3fc« 2 0 lc|E«cofE^Btt, x — ^ 
Bf-^-ftfiiQ "C?B#-£Hfc LT, If -§-fk«Q T-Bf-^-ft; ^ frltrr 
—?%$LI$.TZ>V%^t^mb, Bf-^fli«QSr, Bf^-fbSi 
S«r*#fSi:#ffl^6>*b5^M«o, pi, ^iw^ 
B*fcttf* — ^*-§-*BSr«8'Ji-S i #fflv^*uS4fitM 
gljS iSrfflV^TBf-§-^UT#e>^fcBf-§-fkSix, y ^ 

© i Bt -^-ft ^ Q T-Bf ^-{b $ tbfc t= - ^ i - x — ^Vw^r 




[0 0 2 1] 2 1 lZ.fSM<0 J f4 * 9 «St^J!fett, 

l ©SB * * «#KK 4rl^S'J-r 5 BUMf*- * 

*Tv-?k. f-9 b*— r—^Ar&mmz-IBfitrt&x 
Tv7k. mm*h7 t 4X9&&&rt'Z>*Tiyyrk&m 

[0 0 2 2] sit^^S 2 2 \Z-tm<D"f4 * ^ «i3fi*Jfett. 
[0 0 2 3] »*Jg 2 3 fcHE*©^ >f * ^ iSaS** H 

*Tvzft, mm^tmQx-m^it^tht^—9b^- 
T—zf/^mm^mm-r^^T^^b, msL^hf^^ 

9%^fm'&*Ty^b%m^&^b%W$kb'tZ> 0 
[0 0 2 4] 

mM<DMM<Ds<— y -rsis ^ ^ t:° ^ — ^ & * l t 

^1H ROM^^ ^rV v'^^t r'tfV ^ 
^ (KT, DVD-ROMirlHft-r^)) 2 temWrtZtT* 
K5>f^i li, 7*4*9 K9>f ^1 na^t 

n-KtMPEGf^-^Ki 2 ir^e>«j«Stt 

m&t J r — 9 (SIT, syf^f-* (Contents) £BE 

h 3 izims^n, *-^3«:ig*L* 

[0 0 2 5] fV^^K7>f/llfl DVD-ROM 

19, ^r^fE^$^rv^-r : -^*S^-r5JSEibg|5 2 

ftf*-^S:ttl*-t-SrtP^b«fP2 2, *5j:t^ i£»jgC2 1 
£»fiH§-ffc;lflS2 2Sr*J«-rSffi!l»«B2 O^bfllricSixTV^ 
60 DVD- ROM 2 dH 0f^<7?ffiK (#JxJ2*F^ 

*5 C DVD-ROM2^CiEt^nTV^5 3yfy^f- 

[0 0 2 6] MP EGf^"^- K 1 2 11 X 



(7) W1 0-6 5 6 6 2 

12 

Ftfcot, ffiHHk;«flS2 2 X ymt&£iiZ>fef§r<k7*— 9 

zm^ mm) u (*«) s^fcs^-^srw 

^ mm ®M%rt ? <D\z.>&^t£mmmrx b ^ mpeg 
^=i — K 1 2£r»»J-r5 1 D^risis-r^^^ y 3 
3 ^tttv^^o 

[00 2 7] m-$i-SP3 1 J;0U;/j3nfc«* S 
frtzM$L7 £ —9\^ MPEGf3-KSU3 2C«$ 
10 tt, MPEG7*3-K»3 2tt, MPEGM^ot 

H tt*8fB3 1 tMPEGf^- KBP3 2 £rrft!iPi~<5 J: 

[00 2 8] #cfc % HI 2 t03(7)7P- K HI 4 

lOll ^3^|gl6cO?gJfi^^IlIf^{^loV^TttMi■So **5, 
B2H 7*4*9 Y^^-fX 1 <Z>»f£&KWi-5fc&© 
7P-fl— hT^>9, 03H MPEGf^-W- 

20 ki 2<©iMf ; *KW-?-£:7n— ^ — h-efo^o 

m4<D94 * ym-Mt 7*4*9 K9^f^i l ^ 
MPEG73 — ^ ?^ — K l 2 b<Dffllz.is\,^X&:gi&tiZ> 
7*— 9 b, &^-9izMfc^xmft£Zh&mW%%:L.T 
V^6 0 $ S5}1 7*4*9 K7>f^l liMPE 

[0 0 2 9] DVD-ROM2^|S^*^-CV^r"^ 
£??4rr£:|§-a\ 0 3^3/7^3211^ 

MPEGf^-W- Kl 2<DmmUZ MP 
30 EGf^^W- Kl 2<£»BiJf f — LT 00 I D^m 
^3 1 co^^eV 3 3j5^K*fflU xV-^^K^-r^ 

1 1 ©»]»*» 2 o^m-TSo 1 Dfc Hu^/j^f 

Request Challenge (ID) ilt, 7*4*9 

K7^/i 1 Kmbth&o 

[00 3 0] El 2CO*T?7 P S 1 iC^V^T, 7=V^^K 
74-71 l©M»»2 0|j:, MPEGf^-W- Kl 
2 0»J»«|5 3 O^tagfetbTtfe I DSrSttffiSo *b 
*JIW*fP2 Ott^T'^^S 2JClit*, ^T^T'SIT 
glJSofc I D^*HSi"5^BI«Sr, DVD — ROM 2 

40 ^&K*«t5±5^ i^Sb^2 o^^Jffl-r^o 

[0031] i* El 5 ^m^t-^-r J: b \c d 

VD-ROM2(Z)f^ ^r — x~ ^Pi: 

Lt, ^©DVD-ROM2Srff4tt#e>ii5MPE 

^b-fS^Sfe^BB*! (public key) i>K fr'Afflm (k 
eyl, key 2, key3, • • - ) 

t»ft&JI« (keyl, k e y 2) ttOPPSrftU 
T^L, 4SSb*4>|»« (k e y 3) f*xBl«:fl- LT« L 
50 t^5 0 DVD-ROM2^Wt»i|Lfci#, 




^ N key 3) &m3#tZ.mbfoT^ti^f^£0teM 

[0 0 3 2] &<&Hil^k e y 1 , key 2, ke 

y 3, • • • -fcih^il^Hlii (a 1, J 1, P 
1) , (a 2, J5 2, p 2) , (a 3, 0 3, p 3) , 
• • - T*SfiSc£*bS 0 

[0033] z<oz 5 t^mmt^®?? 10 

X — DVD-ROM2<Z>ROMfigJKl^ia»*H 

t^S#^K*3i^tj*, r.jxS:»#**.S^ tds-e#* 
{^K5gi- -5 £ N * - 7~ - y/vcomn 7 9 rtl » ifi * 

[oo34] 2 o js. mm$$ 2 1 &mw u mm 

S|5 2 1«\ DVD-R0M2^O h 9 ^ ^ t-IE»* 

*tS77/Sr*Bt5o jftS-ftttf, MPEGf^ 
^-Kl 2(DIE^®B£#f-#LTt3: I D^^^^-x. 
^tlT^ 1 ?. DVD-ROM2 0>jRig#fci* #ID|I» 

T% r^f^S2^ #1 D^/E-TS^BHUiRa 

[0 0 3 5] Sbl^ ^r^7°S3m^, SJ^2 
0«\ t^iii;:»St5 77W s t3lii: £;t^TV^S 30 

-^froTV^MPEGf^-^^ F 1 2(£>iS}5£# 
K;*— f^J9^T btuTV^S I Das*jL£ 

n^m^^^^T(i, i D^jSi-s^w^M^i 

<*r£nS 0 *LT, tO»M^«»Stl5DVD-R 
So ^rs^/s 1 TgttBtofc I Di;:»jSt6^IMI^ 

DVD- ROM 2 OH^f*— ^^gttffitS^ 1 7tfiT?%% 40 

[0 0 3 6] —if, x*ryzfz Mfei^T, ^f^/s l 

fS^Ko^ i Dic^-rs^«i^*^T*fcs tfij^ 

(1) ^Challenge (C) SrfW U H4i^t<t5 
r^Challenge (C) tUMPEGf^^*- 

ki 2 <z>»jwa5 3 o {z.m^-r^o 

C = a kl mod p ■■• ( 1 ) 

[0 0 3 7] r. r.T% a, ptt, DVD-ROM2^ 
— X— ^/Kil|E«*tLTV^S^BH|iT?4>!9, p tt*»T 50 
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«C) tfc§ 0 A mod Bfct. A£ B T#JS bfc 

[0 0 3 8] ±i£b*:5£ (1) te, h^i7^KT^r>- 

[0 0 3 9] i4Kfi 9 ^JZ^dLTffSS 
tlfcChallenge (C) tt, MPEGf^^W-Kl 2 
<7>«JW«fP3 Oi^Wf&SixSo ff?OT£P3 0f3:. @3^f 
S^S 2 2{£*31^T. r ^Challenge (C) 
So *L*C, fflftt*P3 0tt\ ^fj'/S 2 3irii^ gf 
S©7y^4ftk 2^itRU (2) . (3) 

sponse (r, d) t Lt, f=V^ K7-f^l 1 

i-s Q 

r = ak2 mod p ( 2) 

d= (C-n • r) k 2-1 mod (p-l) ••• (3) 

[0 0 4 0] &*5, r^7^WSk 2^ p-li 

[0 0 4 1] HUf^i-J;?^ JiiELfcsS; (2) 

(3) frhifr&hfot^i/Z ^Ur^^r r , dfct. Re 
sponse (r, d) fc IT, f-Y^? K5>T^1 1^19 
(HlSS 2 Oi^ttf^Wo fH»9S 2 0 KJ\ 02^X5^/ 
S5t;i*5^T. r (^Response (r, d) ^Sltf^ 1 ?. ^ 
y^S 6 l^il^ 7fy7°6 (^£51 ^T, r. ^Response 

(r, d) ftOf^^ftr, d&^s'^-r 
S 0 

[0 0 4 2] i"#;b*>, ©J^2 0ti. 0 4l^tJ:5 
t-, 3r- rd^S5»-TSti:^{-, aC mod ( p ) £rg? 
f^#^e^^LV^^^^^J^-TSo MPEGf 
2^, jE^T^^-^TfcS^, *f*J 
^/V^/^ft r , d t^BMiiS ^ffl^TSf^W 
^fti3r - rd^ffifi. Challenge (C) , ^r^lta, p^r 
fflV^T*^^ttS^gaC mod (p) <D\%k b < & S D 
r0 2o^IW s f t<*§-^fi, ElGamal 
Signature Schemed LT, <t < £o h 
il/TTO^S (A public key cryptosystem and a signatur 
e scheme basedon discrete logarithms. IEEE Transac 
tions on Information Theory, 21 (1985) , 469-472) 0 
MPEGr^-^f - K 1 2^ie^co T^—y 

iB\ ^Sti^T^nSo ^oT, r<7>a^. DVD-R 

O M 2 (DW^f— ? PEGf^-^-Kl 2fdJ±i 
^SStb^, 12 5 (ClT^^ixSKey Exchange t^^t^ LTV ^ 

So 

[0 0 4 3] Ts^VfS 6t^*3U^T. SI^$^2oCO 
^aS2 0»^, Session key (S) (4) X 9 SI Si" 




(9) 



5 (El 5 (^Session Key S) 0 
S = r kl'- (4) 

[0 0 4 4] —-jjs MPEGf^-^-Kl 2 (OM9> 
§P3 0ti, @3^^T^^S2 3^V^T, Response 
(r, d) SrftJtLT, 7*4*9 K9>f^l 1 f-#^*&L 

ofcChallenge (C) SrJBl^T*:* (5) Uttot, Ses 
sion key (S*) S: Silt's (H 5 ^Session Key S*) 0 
S ' = Ck2 ■•• (5) 

[0 0 4 5] m 2(7)7n-f Y^*^ 7 10 

^T, 7*4*9 K9>f ^ 1 1 <£>*J»S5 2 0 t£<fcoTf)-* 
£tlfcSession KeySt> HI 3 CO 7 n — ^ -r — b t^;*^ 

2 4^1/^MPEGf=i-W- Kl 2<£>fMP 
&53 0 l£<fcoTS3^:fc>fcSession KeyS ' te, -frH-?: 

(6) SD« (7) T-&£*K 
6 0 -t"**?^, 7*4*9 ¥74^1 1 tMPEGf^- 

ki 2i^io^T. ^n^tim-^m^-itm^mh 

S=rkl= (ak2) kl mod p ■■• (6) 
S' =Ck2= (akl) k2 mod p ••• (7) 20 
[0046] r^r^li, Diffie-Hellmen Key Exchan 
ge(Cl*5V^-C*PfeixTl^S (Diffie-Hellman W. Diffie a 
nd M. E. Hellman. Multiuser cryptographic techniqu 
es. A FIPS Conference Proceedings, 45(1976), 102-11 
2) 0 

[0 0 4 7] *r-C, 7*4*9 K7>f/1 1 <Z>»J»SB2 

Ota, 8 i-ii^-, igib^2 1 cdvd-ro 

M2£rIEI&£^£ i: <t fete ^r^/S 7 ~e#:#>fcSess 
ionKey SSrflff ft«2 2 l^»tS 0 * LT, Igi&gfS 
2 1tt, DVD-ROM2C0gf^^ffiB^e>IB»$Hr 30 
1^5-7*— *£:S£-r5o WHHfcfflS 2 2 t*. IPffif pP 2 IT? 
DVD-ROM2d^S4StifcS47 fi -?S:^f5'7 p 
S 7Tr5R£>fcSessionKey S SrfflV^TIIfffHfc LT\ Bff-g- 

PEGf^^^-Kl 2llftt$tl5 m 5 c^Encryp 
tion) 0 

[0 0 4 8] MPEGf^^-Kl 2 <£>^^g|S 3 1 

tif-*%^k7*—9 SrSttEt V , * J r*yy p S 2 6^£;i^ 
T\ ^rOBt-S'fbT*— ^S:. ^fy7 P S2 4"C*«)fcSess 40 
ionKey S' Srffl^Ttff-^- (fifSc) "t"5 (HI 5 CO Decry p 
tion) 0 JhiELfc. X 0 Session Key S' W\ -fe <y is 

KM) «rfr5ri:as-C£5o ^LT, (fl|K) 

9) ^MPEGfn^-^3 2«l&*Mo 
[0 0 4 9] MPEGT3- K*S3 2 tt, 3 1 ^ 

7*— ?K MPEG^St^t^tV^* 
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S-^^f^yry^f-^^^^ 3 (HI 
5 (^Decode) 0 Lt, ^- — ^ 3 ^ = VS't* 

[0050] ±mi>tz.£*>\^ mi<omt&<omm\^^ 

*»IS»LT*5tttf, MPEGf^^/f-Kl 2C0§i 
K* — ) i^fif««S:iaffi"r5i:#, 

t , — * — i^ttSiJ^ffi«B«^#J ^Tfen 

[0 0 5 1 ] $ ibfC, 7*4*9 K9-<^1 1 S-*^T, 
<&^#^<£>T% 7*4*9 K9^^iJi*5^6Wa^S 

[0 0 5 2] #*3. 7*4*9 K^-f ^rt©WJ»«R2 0 

MP E Gf^-^^ Krt^MW 3 0 [i, 8f«3 1 

[0 0 5 3] K-h^»l^lfi^l!li-*5V^ 
f3\ MPEGf^-^Kl 2^5> I DStt*^*^ K 
74 7*1 lMfft|£U 7*4*9 K9>r^l lt^*3V^T» 
m&ft? X K7>f^l l^MD 

S:#ti(&b, MPEGf^-^-Kl 2^43V^KBES: 

t?5 £5i-bT<>J;t/\> ^V^^^b-c, dvd 

AZtilttZ. t©77^Sri»477/fc»**i5 

[0 0 5 4] B6tt, K±^«l^»Jllifi^«8(-*5lt5 
DVD — ROM 2 ttf- ^ SrlB^-r h i2«3SB^) 

tt\ ID«I4 1^^ID > ^7^«»aS4 2^fe 

J3, p ^^r— ^/^ (Key Table) COy^—9 t Lt^ 

lit, ^^^ti/tf-^^MSs 2 ^tft^i"^> 0 

^^(O^l^T^yf— 9 (Contents) ^MP EG^y^ 
— K«P 5 3 {^mSZH, MP EGxyn- Kg|5 5 3 fi, 
3 yfy^f-? SrMP E G^KCffio TflFf ft L, & 

^ft^fc^yry7f-^^Sli5 2^#t^i--s 0 

^g(5 5 2 te, 5 1 J: 9 A* Zthtz*— T—zf/ls 

C0y*—9t, MPEGxy3-K«5 3^e)^tfbS 

5o Sfe^. *<7?lg«|5 4^e>^Cft<7?V'7 e y*t LTCO 




DVD-ROM2dS£j$£*b5o mi-J: *9 , DVD- 

^ ? jr&XM&mmfr b * 5 — — ^/^Sffi» £ *x 
[0 0 5 5] UfcJB 2 (Z>H16(0«?« 

jcfcfcSK *i\ yfy^f-^^DVD-ROMC 

[0 0 5 6] i2C9SI«Si^^5DVD 10 

-ROM 7 2 frtt^X?*— Z>fcmmm<Dm& 
#J4t*LT^6 0 r(7?»2(^||JK^ffi{c:*3V^tt, = 

^DVD-ROM 7 2 {£fE$^£;fr<5 <fc 5 f^fc £*i/*CV^ 

[0057] ^yfy^dftfie i^e><z)3yfyyf 

— MPEG^yn-F^6 9icM$W 0 MP 

EGxyn-KglS6 9fj:, ^yf^f^^MPEG 

ft»6 2tJlttl&-r5o Itf#fb*4fc««6 3^fe(Z> 20 

Pff-§-ftliQ^Bt^b:«6 2tJl«*&S^5 0 WHHfc;*I5 6 2 

tt, B»*{t«QSrfflv^r, m^yry^f 

— ^4DES (Data Encryption Standard) ^"^(d^o 

[0 0 5 8] r<Dit#^t«Qtt. »f^b«rtF#ffc 

2tMtta, jS, p iW^ffci^HfcSlS 6 4tJlttiteS^ 
*f<t«Btf<t»6 4tt, (8) (9) |-« 0 

&mma, jS, pfcfflV^T, «F*ft«Qfcflf-^t 30 

x = ak3 mo d (p) -•• (8) 

y =Q • 0k3 mod (p) ■•• (9) 

[0 0 5 9 ] £l£6|5 6 8ti\ ID«S6 5^b 

©ID, 7?^«*e»6 63&»bC07?^ £t0Httft|$K 

OflF^bSixfcrtfWkiix, ySr^SU 7 1 — ^ 

t LT-frffc»7 0{C#t^-f So £7*»7 0H ^35 6 40 

2 a><btf>»f-5Hfc^ yfyyf-^^Lt, ib«t*— 

LT09DVD-ROM7 2 y^KSgSitSo -*U-£ 
9, HI 7 ^7^i"ct o \Z.^ DVD-ROM7 2l:it Bf^ 

'Afflm k eyi (a i , j3 i , pi). 3K*fc»iF-fHtS 
tvfeffip*{b« (x i , y i) ^ * — LTfE 
^£*x£ 0 50 




[0 0 6 0] ^i-, ±a$LfcJ:5**jfe^«3SSixfcD 
V D — ROM 7 2{e:|a»$^TV^S7 :r — 

Ttftp^-r^o 12 8 n &mw%mmist^2<Dmifc<Di& 

-yt/l,3ytV-^8 0fj:, DVD — ROM 7 2 4 K 

8 liaoTS4^/cStr-^«^, r<z>S 
^f-^^f^^Kt^MPEGf^-^-KS 2^> 
fe«JEjt£;h/C^<5o MPEGf^ — y s$ — K 8 2i)*h<D 

I^$tif^yryyf-^^ ^n3ii«J 

K^-f :/8 1 ^MPEGf^-W- K8 2<£>1$J*«\ 

[0 0 6 1 ] 7=V^^ K5>f^81 H DVD-ROM 
7 2 4«»U Sf^coT^ir^^^T^ir^bT, ^r. 

^5B£-5Hbg&9 2, RXimW}U9 1 tPt^L^9 2 4 
3fflPi-£$WP£i$9 0a>&«*j££*LT^5 o DVD-RO 
M7 2 {Ul Bf^OffiB (0J;Uift(*iJS f^s^) 
rtF#<k^ffiffl**tS^BB«ia, /3, pXr^Bff^tSixfe 
K«x, y 4^fr^— ^~:^/i^^~^2 5 ^^I5^ 

^tltV^c **5. DVD— ROM7 2 |d|21® $ t^TV^ 
S^^r-^y^— ^tt. MPEGMi-J:ot??^ft^ 

[0 0 6 2] MPEGf3-^-K8 2lt g§ 

i (Dmm^mtmm^, /^yt;^yt^^8o 

2J:?>«f&Six-6rtF^t;7 ? -^Srtt* t, ^cr> 

0 1 4^TLT^5o 0 1 fi, ts-^ 

(«M5) «0f3S4fT5/c*Jc^S*ffi*«n fc, MPEG ir 3i 
— ^#-K8 2 4»8Ui-S I D4IEtt-r^>^^y 10 3 

[0063] «-9-«fsi o i ^e>a^$*bfe«#$ixfciit 
#-ft:^^^^^T=-^^, «^i o 4 icitt^^^^ o 

^/c. 0 5fc*. K7>f^8 1 

8M6«ni:^BB«ipSrfflv^r©rtf#fb«QSra 

tltas i o 4 ^«*&i-^ 0 * urm^as io4ii r. 

tt, MP EGf^" K^l 0 2 t^mS £tl, MPEG* 

S J: 5(-*^tvTu>5o ^Jffli&Pi o on ffi^-SFPi o 

1, MP EGf ^ 1 — 0 2, m^-gPl 0 4SW^- 

ft«a#«f»i o 5 4*jwi-5o 




[0 0 64] m 9 tm 1 ^-T— K h 

it, ^(Dm\^^^xmm-fz>o H9#, ns^fv 
^ K^^r^8 i <D%m%:mm~r : &7v-3--r— vx$> 

f* =i — K 8 2 <om l-*5^Ti§g: $ *v6 t 2 - * 
[0 0 6 5] DVD-ROM7 2^f2®JtltV^T- 

?%n±1rz>M&, ttOI^Hioo^i/^ssil^ 

V^. MP E Gf^-^ K 8 2 WSJW 1 0 0 ti, 
MP EGr^ — — KcOfSS'J^— LTCO I D£r^ 
^1 0 lO^^U 1 0 3 3&>£>S8#.tbU T*^*^ K7 

>f ^8 i<^WJ»as9 0ir2|{Si"5o -^ID(1 mil 

t^Tj^i" <fc 5 Request Challenge (ID) i Ltf 
[0 0 6 6] K9-f ^8 1 <Z>f6!l»tfl5 9 Of*. M 

pegtW*- K8 2ofM»*Bi o o^feaibnr 

I DSras^^^s/^S 3 1 (e:*3V^g^ffit5o * 
LT> »J»fl5 9 Ott^^^^S 3 2(^*. ^T^/S 
3 1 -CSttfeofc I D{d^r^^^^, DVD-R 
OM7 2j&»6>Sc*R5 <fc 5t-, Kiba5 9 1 S:»J«"*"5o 
[0 0 6 7] Hi 2I^S^^WJ:5 

DVD-ROM 7 2CD/5Jf^(7) hv^MJ^ ^r— 7^ 

x, yt, :^DVD-ROM7 2?:BiLt#^W 

MPEG^i:j;ot^t§nti/^=iyfyyf- 

^ *l*#{bi-S^BH« (public key) htK &tefflm 
(keyl, key2, key3, ) &t*R£#ffc 

SnfcPt-^ffc;« ( (x 1 , y 1) , (x 2, y 2) , 
(x3, y3) ) f>^$hX*hZ>fam*$:m-t7 7 

[0 0 6 8] Hi 2i£*3^T\ *Sb*^BH«i (key 
1, key 2) RXfiltfHkZtlfrmfHKn ( (xl, y 
1) , (x2, y2) ) ttOHlS:f*LTSb, 3S$)&^ 
P^gt (key 3) &t/BfiF^kStbfcl*#{b« (x3, y 
3) (j:X^tt$Ul/^o DVD-ROM7 2& 

Wit $nr^£ 0 La>Lfcas?>, fdx.fi, ^BH«xwnff 

^Yb«Q<^<Z>j^5£<^&o (Hi 2 <D|f? 2 COT^f® 

<Z>»-g\ k e y 3 JSOJ ( x 3 , y 3 ) 

ttQ) ^s|R3#^«e>ixL*ofcJ:5ft»^ ^<D<k[H§ 

[0 0 6 9] #*3, #4^§t keyl, key2, ke 
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y3, t3\ ^n-Ptu^BBtt (al, 0 1, p 

1) , (a 2, 0 2, p 2) , (a 3, 0 3, p 3) , 

[0070] roi^^m i#^fc£;ft,fci^{b« 

QXW*?!b^9^Sr*i-*— 7"-^^^ DVD-RO 
M7 2<DROMfg^f:ie2^£tLT^£#'£'i-i3\ roo^ 

[0 0 7 1 ] f&JWSlS 9 0 te, ffiglfflS 9 1 SrffiMHJ I, KM 
g(5 9 1 DVD- ROM 7 2 <DBfl£<D h 9 s> ^ KbES 

HJLfc^-x— ^Wi»J1»«f|5 9 Ot^Wif&Stt, fflI»SB9 

3 1 TSttffitofc I Dtd*fj£i-5^ffl«, W-^ffcSaxfc 

20 <9, DVD-ROM7 2©»gftt, # I D{£fcI"J&"t"<5 
Lt^< 0 r(D^-r s^S 3 2T% #1 D(Cl^f 

[0 0 7 2] £ £>l-. s^S 3 3K:*5VVT\ £<Z>4k 

30 2(DM&# K*— ) ^tfetll/^ I D 

V D — ROM 7 2ic:»lSi-6^M«XVIi»^t«iQSr« 
«i4:"rs^5^5|2«S*u-5 0 ^t^^S 3 1 T'gtfEt 

S^JB-TSnSo -ftefr-h, r.co^^^o^TfL mp 

EGf^-^-K8 2fj:, DVD-ROM7 200S^ 

^COSS^SEttdS. HI 2(^^tt^>Key 
40 exchange ^^fjS U"CV^^> 0 

[0 0 7 3] — ^7^5/^3 3(C1*3V^T, X<Ty^3 

Jgi ^^Sfe^^irl5]1^(-> iiJfiLfc* (1) d^foOial 

lenge (C) SrW"»L, MPEGf^-W- K8 2^ 

M^asi 0 otrw^-r^o 

[0074] Hi 2 9 rc^J: ?icLTIt» 

^ttfcChallenge (C) tt, MPEGf^-«" K8 
2 0*^351 0 0(^W*&$tb-5o W»»10 0tt, Hi 
50 OW^fy/S 5 2(C^5l/^T, (^Challenge (C) 4r 




g#Bt5o tit, fflJWSPlOOtt, ^T^/S5 3C 

-S§-k2SratRU ±S5Lfc5£ (2) , (3) ^feT 5 ^ 
r , d I, -t^JSIErSrResponse 

(r, d) ilt, f^^^K7^^8 1^«t6 0 
[0 0 7 5] mi 1 K*1-J: ±J£LfcA (2) R 

W (3) dife**^^^^/^^^^ r , dW\ 
Response (r, d) i IT, f>f K7^^8 
ffl\B)%&9 0lZi&$i£ft& o fSWgjS 9 0 te, @9Wfy 
7°S3 5i^^T, ^ (^Response (r, d) Z^ttM 

9, **ryrf& 3 6 Kit*. xf^7°3 6m^ r 

^Response (r, d) to7^^^-firr, d £r 

[0 0 7 6] ftffflgP 90(t 012 fc^f <fc 

i3r • r d£ri&*-T5 £ t fctil, aC mod ( p ) Sr 
*S#U M#<^«;&S»UV^5^S:*lJ^-rSo MPEG 
^=,-^~ K8 2*S. IE^y^-^T-&5^, jf$ 

'£mm& t&m^Xl&MZtlZmPr • rd^Itt, Chal 
lenge (C) v 45HJ8«a, p &JBV^T#fc S>ix5fliaC m 
od (p) cr>ffit»U<«S 0 iS?l-> MPEGf^-W 
-Kl 2^i£^^= 1 ^-^^*V^^ x H^^flltta 

*b£ 0 ftoT, r<Z>*£\ DVD-ROM7 2^t'ft 

[0 0 7 7] 77^^3 3 6 1^1/^, SS^fc2 0 

^, »JWgi$ 9 0 f*, JBl^ft^ffitrafll^, Sessio 
n KeyS£±j*l.fc5S; (4) <£<9^SlT-£ (12 1 2 (£)Ses 
sion Key S) 0 

[0 0 7 8] — MPEGf^-^ K8 2 <£>ff!«d=P 
SfB9 0tt, 01O(7)77 5/7 a S5 3i^V>X, Response 

(r, d) Srff-gLLT, 7*4*9 K^-T^8 1 L 

777^S 5 2 Tg ttSfo ^Challenge (C) £rffl 
V^T±SSl;fc5t (5) Cffiot, Session Key S' Srifl 
(HI 2 (^Session Key S*) 0 
[0 0 7 9] £oT, *Ty7S 3 7\Z$o\,^Xt*4 *9 
K^-^^8 1 <Z>SJWSR9 0(C«fcoTtf»SixfcSession 
Key St, 77^^S5 4^^TMPEG7='-^f 
-K82 <£>ffjOTS$ 1 0 0 \Z X o XftiW £ tbfcSession Ke 
y S' H\ *l^H*<Z)?B«t?lttWbfcJ:5i-, tftf 
tv±aiLfc5C (6) RV (7) W#tt*U^ 
7*4*9 h*7^^s l tMPEG 
7 f ^-^-K8 2{^v>t, tfr^ffi— OBf^ftfll 

[0 0 8 0] $ 7*4*9 K7^^i l Mfe^T, 
Session Key S ^SS^-f « £ , 7f ^^5 3 8 1^1^ 
B?»«i9lW:, DVD-ROM7 2J:l9S4^n«t 
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<bStbfcBS^t«x f y* N ^StMPEGf^^ 
jtf — K 8 2 5 (H 1 2 O x , y (as is) ) 0 

[0 0 8 1] MP EG73 — y ^ — K8 2 (DffftJ^SlS 1 0 
Ote, Session KeyS' ;&S#k*Lfc£>, Si^f^^S 
5 5i^it*, 77^/3 8i^V^, Hf ^rtkmm^U 1 

1 0 3a>feffi«ttn£K*WlT, * ^fc«ffi-^«H5 1 0 
5MtfcSf&U ^7^S 5 6 l^m&o ^7^5 

10 6iC*5^T, l*-iHfc;«ffi-S§-«5 1 0 5 Pff-g-ftStufcBff 
^b«x, y£#:i£ (10) i^otS^- («») U 
£<D«#£;ftfci*#*fc«Q 1 0 4 K 

UW&SHS (12 1 2C0Key Decryption) 0 
Q = (y/xn) mod (p) •■■ (10) 

[0 0 8 2] uf^-fbi^S^-SiS 1 o 5tt, W6 

mnt^mmp^m^x^ sr^fb^tb^x, y ^e>iit-§- 
fb«QS:«* mm) -tz>o 

[0 0 8 3] —Jj, 7*4*9 ^74^8 1 te, *"ryzf 
S3 8T^ft$^B|^ft«|x, y ^MP EG72 — 
20 ^#-K8 2|Zl««l^ ££>fcl, ^fy/S3 9|: 
xg^, WJW«9 0tt, B»«B5 9 1 S:*J»UT, IgSblflS 9 

m, dvd-rom7 2^e>flffft3yfyyf-* 
*^t«Q•T?Bff■s■^t;*nTv^s3^■r>•y) «^3 9 2 

J^ja-t-Sttt^, *JWSt5 9 0t± > ^7^S3 7T 
5R#>f;:Session Key S SrRff-^ftSB 9 2 fcf*tjg-^5 o RfiF-g- 
itU9 2f3, If^^ti^Pf^L^^^^r-^^Sess 
ion Key ST?ffiMHfcbt\ Bf-g-fbf*— * P E Gf =* 
— K8 2^tt*&"t"5 (0 1 2 (^Encryption) 0 

30 [0 0 8 4] MP EGf^-W- K8 2 CD^ft-SrSflS 1 0 
If*, El 1 0(0*7" -y^S 5 5t-43V^T, RgMHtSP 9 2 
frbm&£tl1tm*Hk?*— ^t^S5 

^^cSession Key S* ^ffll/^®^ (fifgt) "TS (Hi 

2 (^Decryption) 0 ±.$1 L/c J: 5 Session Key S* 
ti, Session Key S t f^" <7)i&X&> & COX, jELV^-g- 

(Pt^S?^c) SrfT5-i:^'X?#5o -tiia^ Sess 
ion Key S \Z. X Z> Kf^t^WI^Six. Bf-g-ffclRQ "CBff-S- 

40 /^5 0 tit, r^BSfft^yfyyf- ?i>*m^mi 

[0 0 8 5] 9:^*7" yZfS 5 9iCil^, «#<B5 1 0 4 
tt, 0 1 ^^coSt^b^^T 1 ^^^ — 9&U^ 

»io4^b©ttt (ft?^) a?ixfcrtP#fbiiiQ («^ 

tt) ^fflv>x«^- («K) t5 0 «2^^Sg 

(ommcom^, DEs<Dm^r^MifiMn^ini> (mi 2 

CODecryption) 0 tit, ^^ffi^ $ttfe^-§- 

^) «PEG7^-KSl0 2(:M^Mo 
50 [0 0 8 6] MP EGf'^ — K»l 0 2 f*, ffi-g-fflJ 1 0 



3KmSiTZ> (m 1 2 (7>Decode) 0 ^^7 3 

[0 0 8 7] £JL±, JhS&bfcJ: 3S 2 <Z>JMfe£>7#ffi 

[0 0 8 8] Sfc, ro£ 9 ^ r<z>£S2<^i6(Z>7gli 

affidSBjli^45 0 ^r-C, £co»2<Z>|Bfe(Z> 
fl2*i<z> <fc 5 i-, tyi/g iWSEici/Bv^ns^ 

[0 0 8 9] |f?2{;i|£^<^fit;i:^T, -^V * 

MHWiooii, a*»ioi, i04Wi05t- 

[0 0 9 0] £bf-, »2^J6(^?Bffi(^j3V>Ttt, M 

8 1 ^t£#&U 7*4*9 K9^^8 1 t£*3^TBMES:fT 

U MPEGf^^- K8 2^*3V^rBBESrfT5 «t 
5iatt)J:v\ Sfc, rV^^tU, dvd-RO 

[0 0 9 1] fcj3, iB*l»tfJB2 0**<0»lB^*3 
V^Tfi. 06, HI 7, Hi 2{C7jk*i-£ Bff^kStb 

l o<z>=*-x— ^/McSfti" 5 «fc 5 bfcj&s, #J£. HTI2 
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[0 0 9 2] Sfefc, ±IEJBlXtf»2 0||J(S^*^ 

6 9 5 0 bT3te*£»36S;h/t^5 t<Z)S:ffl^ 

10 [0 0 9 3] £*±, JtiBflS 1 ft W« 2 0>m&<DT&mz& 

v^-oa, *mw*74 *9 h^^ytT^—^t<Dm^ 

fg"t*fc£ 0 #lxJ*\ 7=V^ K7^^, *y 

& ^ l r - y it.?*— 9 % &m-t ^ >- 9 1- B * ift 

[0 0 9 4] ±lB*l&V*2^1fc<iO?g|B^*5 
V^T^^, fBeStbS^^^^y*—^^— Mt bT, \f 

[0 0 9 5] ±3E*lfttJ«»2 05*lfe^ffit- 

[oo9 6] ^&m<omiRxym2(Dmm<omWi 

30 5 a*. #»Wi*-*i^Rfei\ CPU^^eysfeiTSrffl 
[0 0 9 7] *3SMo^eSrJfcKb*v^Hfc*5 

[0 0 9 8] 

tt, I^bMShSr^^^f t r 

40 y^ci7^fttk 2Srfflv^Tl*#{b«S:Si»t-§ 
J;5KU r ©f^^^f t r *^H«a, p^r 
yl/^J^ftmk 2%m^^TmWlTZ>£ 5(-bfc^>T% Hf 

[0 0 9 9] ^Mi^teltaKE^Jfei-J:^^ 

KBESrfTp <t 5(-bfecoT% J: 9 ^S^fA^ 
50 5 n t & *Ttig ^ * 6 o 
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[0 10 0] £fbM, *«M(-*3^5faftfflEfr, T^* * 

[0 10 1] **M{c:*3WSie«fflE#:. 7*4*9 

[0 10 2] £bt^ *#Wfc:fctt5fE»aft;. f*>r* 

s shirrs 1 zm^^bth&^mma, pt,mi<om 

[0i] *«M*jafflb^sgi<7>*iifi<^?g*^^— y^- 
[02] 0 1 (07*4*9 v^^y&mft&wiw-t&y'v 

[0 3] 01 K^S&fPSrRWi- 

30 

[01] 



[0 4] 01©*lO||jtt^«(35»f^SE:lttM-rs^^ 

[05] 01^1 (DrnM^mm^^^y*— 9<omti 

[0 6] *3gW*jfifflL^*i^lllfi^liBt-»^S 
DVD - ROM*S»jgi-SSB^«lJB!KWIS:*"t*^ t2 ^ ^ 

[0 7] *«M&iBfflL^IB2 0||J(6o^«|{c:*5^6D 
VD-ROMSr«Jt-r*|fi«0«riK«S:"r^n 

[08] **WS:iBfflbfc»20*J6(?5«llB<o^-y^ 

[0 9] 0 8©^^^ K^^^tbf^SrKMi'S^i 3 

[0 10] 0 8COMP EGt3-^ K<Z>»f£S:Stt0§ 

[0 11] H8 0|B2 0*lfc^*<?5»f^S:ttW't-S^ 

[0 12] 0 8(Z)^2(^3l^^^^^^tt^>7 ;:? -"^cO^ 

[013] ay^yy^ * Lfc4§^<Z>*— 7^ 
— rf/i^fll^M 4r^"T 0 *C S> S o 

1 /^yt;l/3ytV-^, 2 DVD-ROM, 

3 ^r~^, 1 lfV^^K7^^ 12 MP 
EGf^^-K, 2 0 MffltH, 2 1 JUiij 

2 2 «F^b», 3 0 fMBft, 3 1 
SP, 3 2 MPEGf^-Kft, 3 3 ^ ^ y 
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-S2 





YES 
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Response £ 
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Session key 
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-S5 



S6 



S8 
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MPEG K 
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Challenge -5 
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Challenge J; 
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S24 
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S26 



CUD 
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& « a c rood p : p U a prime number, a € Zd* 
public key : (a ( /?,p) 
private key : n 

<dxx*epubBckey> Request ChaHe^edD) m 

< select random number kl> — -< select random number k£<k& p-l)=l> 

c=aWi p 

_ , >s . r= aSnod p 

< verify signature > Response (r,d) 

or , c , d=(C-n-r)k2- J mod(p-l) 

& f - r*= a c nrad(p) 

S^i* 1 * («"■)" mod P=S' S' ^(afmod p=S 
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[B5] 



/ ID Flag 



11 f^x^ K^>r^ 





Pubfic Key 



#1 


O 


Key 1 ( daj91.pl) 


#2 


O 


Key 2(a2j9fcp2) 


#3 


X 


Key 3<a303tp3) 






{ 



Key Table 



Key exchange 
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PubBc Key 
a* iS, P 



51 



ID 


Flag 


Public key 


#1 


O 


keyl(<aa£l.pl> 


#2 


O 


key2(<*2,jSap2> 


#3 




key3(a3l^ap3) 




i 


| 
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Encrypted Encryption key 
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o 
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o 


(x£ y2) 


#3 


X 
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i 

! 
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I 
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Encrypted 
Encrypticn Key 
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MPEG 

— r 



CDES) 



ID 


Flag 


Public Key 


Encrypted 
Encrypticn Key 


#1 


O 




(xl.yl) 


#2 


O 


key2(aZ0Zp2) 
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#3 


X 


key3Caa^ap3) 


0cay3> 






j 






72 DVD-ROM 



Encrypted Contents 



G2 



IH8] 



± 



90 



91 



92 



101 



100 



\**»\ 103 



105 



104 



J 02 



MPEG 



80 / >- V^zj > e - 9 



T- 



82 MPEG t^—¥ 



— T3 



(18) 



10-65662 



[09] 



[010] 



Disc ^©v 1 — r>p^e» ID i: 



-S32 



NO 



S33 



YES 



Challenge ^ff^Lf 2 ^-^ 



S34 



■r — ^Jfr* & Response £r 



< s s Sjj 



I 



Response f*9<Z> 
Signature j. ? ^ 



S36 



OK 



[ Sessfcn key (S)^H^C | S37 

-S38 



I 



pted Ehcryptkxi Key 
x,y %rr^-yiZ*<D&-£i£Z 



I 



C * T ) 



MPEG -r n — ^4?— K 



t^-^&id* 


S31 







Challenge 
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Response &ff*W0 
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Encryption key (x,y)£ 



Encryption key Q $ffr#$~S 



-r- fits' T^^b-rs 
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-S55 
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< choose public key> 



MPEG f3-^-K 
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public key : (a,)3.p) 
private key : n 

Request Challenge (ID) 



ID 



< select random number kl > 

C— a*mod p 

< verify signature > 
/9 r - r*= cTmod(p) "~ 

S=r k, -(a ,fl )' a mod p-S* 



Challenge (C) 



Response (r,d) 



-< select randum number k£(k2, p— 1)= 1> 

r— a "mod p 
d-(C-n • r)k2- , mod(p-l) 



S* =C k3 =(a ki ) 1,a mod p=S 



x, y 



x, y 



Q= J^modCp) 
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■ Encrypted ] 






^[Encryption key \ 


Encryption 



^Contents 



Key 



X, y (as is) 



Qjcryptcd 
Cmlens 



ID 


Flag 


Public Key 


Encrypted 
Encryption Key 


#1 


O 


keyl(«l.j31,pD 


(xUyl) 


#2 


O 


key2(«2,02p2) 


(x£y2) 


#3 


X 


kcy3Ca3.03tp3) 


Cx^yS) 
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